Threat Level: green Handler on Duty: Russ McRee

SANS ISC: HTTP Header Usage Statistics HTTP Header Usage Statistics


Sign Up for Free!   Forgot Password?
Log In or Sign Up for Free!

This is a continuation of work started by Brough Davis as part of his software security project for his Masters in Information Security Engineering. The main goal of this project is to find how many sites use security relevant headers, like for example the X-XSS-Protection or X-Frame-Options headers.

Below you will find a table/histogram showing how many times we found each header (security relevant or not). We access the index page of each site using a "head" request. The list of sites is derived from Alexa's Top 1 Million sites. We try to poll as many sites as possible each day.

As we collect more data, we will plot changes over time.



All Headers Active In The Past Month
Header Popularity
Set-Cookie
Content-Type
Date
Connection
Server
Cache-Control
Vary
Expires
X-Frame-Options
Content-Length
Strict-Transport-Security
X-Content-Type-Options
CF-RAY
Cf-Request-Id
CF-Cache-Status
Last-Modified
X-XSS-Protection
Accept-Ranges
Link
Pragma
ETag
Expect-CT
X-Powered-By
Via
Age
X-Cache
Content-Security-Policy
Access-Control-Allow-Origin
Content-Language
P3P
Referrer-Policy
X-Amz-Cf-Pop
X-Amz-Cf-Id
X-Cache-Hits
X-UA-Compatible
Alt-Svc
X-Served-By
X-Timer
X-Download-Options
Access-Control-Allow-Headers
X-Varnish
Access-Control-Allow-Methods
X-Request-Id
Access-Control-Allow-Credentials
X-AspNet-Version
X-Runtime
X-Adblock-Key
Content-Security-Policy-Report-Only
X-Drupal-Cache
X-Permitted-Cross-Domain-Policies
X-Check
X-Xss-Protection
X-Cache-Status
X-Generator
X-Request-ID
X-DNS-Prefetch-Control
X-Cacheable
Timing-Allow-Origin
X-Iinfo
X-Content-Security-Policy
Content-Encoding
X-CDN
X-Ua-Compatible
X-Envoy-Upstream-Service-Time
Status
Feature-Policy
X-AspNetMvc-Version
Access-Control-Expose-Headers
X-Drupal-Dynamic-Cache
Access-Control-Max-Age
X-Via
Upgrade
Keep-Alive
X-Ws-Request-Id
X-Age
X-Turbo-Charged-By
X-AH-Environment
X-Robots-Tag
Request-Context
X-Proxy-Cache
EagleId
X-Cache-Group
Server-Timing
X-Backend
X-Hacker
Report-To
X-Amz-Request-Id
X-Server
Host-Header
X-Amz-Id-2
X-Server-Powered-By
Grace
X-Nginx-Cache-Status
X-UA-Device
X-Dns-Prefetch-Control
X-LiteSpeed-Cache
X-Varnish-Cache
X-Rq
X-Swift-CacheTime
X-Swift-SaveTime
Ali-Swift-Global-Savetime
X-Page-Speed
Cf-Railgun
X-Pingback
X-Styx-Req-Id
X-Pantheon-Styx-Hostname
X-Amz-Version-Id
NEL
X-OneAgent-JS-Injection
X-Cache-Spec
Xkey
X-WebKit-CSP
Allow
X-Backend-Server
X-CST
X-Host
X-Device
X-Vhost
EagleEye-TraceId
X-Server-Id
Surrogate-Control
Request-Id
X-Dispatcher
X-Node
Content-Location
X-Response-Time
X-Akam-SW-Version
Accept-CH
X-EdgeConnect-Origin-MEX-Latency
X-EdgeConnect-MidMile-RTT
X-Ruxit-JS-Agent
Accept-CH-Lifetime
X-ASPNET-VERSION
X-Ac
X-Template
X-Application-Context
X-Language
X-Country
X-Cache-Lookup
X-Readtime
X-Cloud-Trace-Context
X-Mod-Pagespeed
MS-Author-Via
X-B3-TraceId
X-Origin-Cache
Accept-Ch
Rating
X-Cnection
X-MS-InvokeApp
X-Kinja-Server-Push
X-HW
X-Url
Accept-Ch-Lifetime
X-PC
X-TtlSet
X-Vname
X-ORACLE-DMS-ECID
X-Clacks-Overhead
X-ESI
X-GitHub-Request-Id
Edge-Control
X-Trace
X-Middleton-Display
Response
X-Sol
X-Middleton-Response
Display
Pagespeed
X-FastCGI-Cache
X-Content-Type
X-Vcap-Request-Id
X-D2id
X-Cdn-Fetch
X-Kinja
X-Kinja-Build
X-Kinja-Revision
X-Kinja-Server
Verso
X-GoogleNews-Bot
Arr-Disable-Session-Affinity
X-Exp-Id
X-Exp-Variant
X-Use-Magma
X-Goog-Hash
X-Buckets
X-Rack-Cache
X-Server-Name
X-Country-Code
Service-Worker-Allowed
X-Oneagent-Js-Injection
X-Navigation-Version
X-ORACLE-DMS-RID
X-Abt-Application-Version
X-VARITI-CCR
X-Varnish-TTL
X-Amz-Rid
X-Powered-By-Plesk
X-Pinterest-Rid
Pinterest-Version
Pinterest-Generated-By
X-Cache-TTL
X-Client-IP
X-Fastly-Request-ID
SPRequestGuid
X-SharePointHealthScore
X-Release
X-MSEdge-Ref
SPRequestDuration
SPIisLatency
Fastly-Restarts
X-Dw-Request-Base-Id
X-Element-Page-Cache
X-Cached
X-NF-Request-ID
Public-Key-Pins
MRF-Tech
X-TTL
X-B3-TraceId-Primal
Mrf-Cache-Status
X-Webkit-CSP
RTSS
AR-Request-ID
Ar-Sid
AR-PoweredBy
AR-CACHE
AR-ATIME
X-Edge
Access-Control-Request-Method
X-Origin-Upstream-Status
X-SRCache-Fetch-Status
X-SRCache-Store-Status
X-LLID
X-Px
X-Ttl
X-Powered-CMS
Fusion-Component-Id
Fusion-Content-Id
Fusion-Deployment-Id
Fusion-Template-Id
Fusion-Content-Source
Fusion-Source
X-Ezoic-Cdn
X-Upstream
Content-MD5
X-HP-Webp
X-Jurisdiction
X-Mid
Cache-Tag
X-ECACHE
X-MCACHE
Charset
X-Recruiting
X-Amz-Server-Side-Encryption
X-Mg-S
S
X-Content-Digest
X-Version
X-Pinterest-Direct
X-PressLabs-Stats
MicrosoftSharePointTeamServices
Fastcgi-Cache
TCN
Front-End-Https
X-Debug
X-Content-Security-Policy-Report-Only
X-T
X-Kinsta-Cache
X-Id
X-Grace
Filters
Cache-Tags
Server-Node
Edge-Cache-Tag
X-Accel-Expires
X-Forwarded-Proto
X-Logged-In
X-Correlation-Id
X-Forwarded-For
X-Amzn-Trace-Id
Server-Name
X-Yandex-Sdch-Disable
Nginx-Cache
Surrogate-Key
X-Kong-Proxy-Latency
X-Kong-Upstream-Latency
X-Varnish-Age
X-DynaTrace
X-XRDS-Location
TP-Cache
TP-L2-Cache
X-B3-Sampled
X-Request-Received
X-Request-Processing-Time
X-Ser
X-Server-ID
X-Request-Handler-Origin-Region
X-Microsite
X-Hits
X-Ruxit-Js-Agent
X-DIS-Request-ID
X-Cache-Key
X-Shield-Request-Id
Powered-By-ChinaCache
X-AppVersion
X-Activity-Id
X-Az
X-Amz-Replication-Status
X-F-Cache
X-HS-Hub-Id
X-HS-Content-Id
X-HS-Cache-Config
X-HS-Combine-CSS
X-Goog-Metageneration
X-Goog-Stored-Content-Encoding
X-Goog-Storage-Class
X-GUploader-UploadID
X-Goog-Generation
X-Goog-Stored-Content-Length
X-Origin-Server
Accept-Charset
X-Git-Hash
X-FTR-Request-ID
X-Geo-Country
X-Hostname
X-Respond-Thread
Nel
X-XRDS-LOCATION
X-LB-Cache
X-Upgrade-Enabled
X-DataDome
Cache
Section-Io-Cache
X-Frontend
X-Rid
Access-Control-Allow-Method
Alternate-Protocol
X-Aspnetmvc-Version
Host
X-Cache-Age
X-Mobile-URL
Cleartype
MS-CV
Paypal-Debug-Id
X-Type
X-IPLB-Instance
X-Content-Options
Healthy
X-AOL-HN
X-Varnish-Backend
X-Seen-By
X-Whom
X-App-Environment
X-VCache
X-WebKit-CSP-Report-Only
ServerID
Payment
X-Route-Name
X-Signature
X-TT
X-Request-Guid
X-Is-Crawler
X-B-Cache
X-Cache-Action
X-Debug-Info
X-Flags
X-Aspnet-Duration-Ms
X-Providence-Cookie
X-Page-Id
X-Jobs
Fastcgi-Useragent
X-Time
X-NWS-LOG-UUID
X-TEC-API-VERSION
X-TEC-API-ROOT
X-Source
X-Fastcgi-Cache
X-TEC-API-ORIGIN
X-Mobile
X-N
X-Load-Cache
X-RateLimit-Remaining
X-Erf-Bev-Bev-Is-Generated
X-Erf-Bev-Bev
X-Browser-Type
X-Via-JSL
X-Daa-Tunnel
X-FB-Debug
X-Litespeed-Cache
X-Cached-By
X-Akamai-Edgescape
Version
X-Cache-Rule
X-Cache-Operation
Refresh
Viewport
X-Rule
X-Response-Served-From
X-Accel-Buffering
X-Original-Request-Id
DC
X-Framework
X-Zen-Fury
X-Proxy
X-Drupal-Cache-Tags
DynaTrace
X-ProcessESI
X-Cacheable-TTL
Ms-Operation-Id
X-RTag
X-RemovedCookies
X-Instance
X-Wix-Request-Id
Access-Control-Request-Headers
X-Contextid
X-Real-IP
Referer-Policy
X-UUID
X-HTML-Minification-Powered-By
X-Tt-Trace-Tag
Realpath
X-Cache-Time
X-Tt-Trace-Host
X-Region
Node
X-Distributor
X-Page-View
X-Drupal-Cache-Contexts
X-Yottaa-Optimizations
X-Yottaa-Metrics
X-FW-Hash
X-FW-Dynamic
X-FW-Type
X-FW-Static
X-FW-Server
VIX-Pulpo-Node
Eomportal-Instance
Countrycode
X-FW-Serve
X-Cache-Expired-At
VIX-Pulpo-Upstream-Status
X-B
X-Environment-Context
X-Cluster-Name
X-L-Path
GEO-INFO
X-Cache-Control
X-G
X-Tumblr-User
X-IPS-LoggedIn
Liferay-Portal
X-Tumblr-Pixel-1
X-Tumblr-Pixel
X-Content-Powered-By
X-Tumblr-Pixel-0
X-Cache-Hit
X-Node-Name
X-User-Agent
Server-Info
X-Varnish-Ttl
X-Tumblr-Pixel-2
Webserver
From-Origin
X-Pass-Why
X-App-Server
Section-Io-Id
Section-Io-Origin-Status
Section-Io-Origin-Time-Seconds
Section-Origin-Responded
Protected
X-FireWall-Port
X-Ratelimit-Limit
Ec-Rule-Version
X-Amz-Meta-S3cmd-Attrs
SRV
X-Protected-By
X-Revision
X-Cache-Server
Frame-Options
X-Backend-Name
CF-IPCountry
Meta-Geo
X-Endurance-Cache-Level
X-ES-SERVER
X-Hyper-Cache
X-Www-Served-By
Cache-Status
X-Handled-By
X-RN-RSRV
X-Hl-Ver
X-Mode
X-UPSTREAM-Address
X-NYM-Debug-Backend
X-Site-Version
X-FB-TRIP-ID
X-Storage
X-Forwarded-Host
X-Soup
Xserver
X-Locale
X-Varnishpool
X-Cache-Grace
Fastly-SSL
Decoy-Debug-TTL
X-Pubstack
Retry-After
X-Human
X-Web-Node
Decoy-Debug-Status
X-Be
Decoy-Debug-Key
Cache-Tv-Group
Country
Azure-SlotName
Azure-InstanceId
Azure-RegionName
Azure-Version
Azure-SiteName
X-Origin-Hint
X-ProxyCache-Status
X-Uri
X-UA-Device-Type
X-ProxyCache-Key
X-BYPASS-REASON
X-Proto
X-Proxy-Build
X-TT-LOGID
X-Timing-Wait
X-SayCDN-TTL
X-Section
X-Format
X-Say-Cacheable
X-Redis-Cache
X-Say-TTL
X-Labrador-Cache-Channel
Webcakes-Region
TWC-Connection-Speed
TWC-Device-Class
Selected-Fe
Property-Id
Cache-Name
X-Origin-Date
TWC-GeoIP-Country
TWC-GeoIP-LatLong
Webcakes-App-Version
X-PHP-Host
Webcakes-App-Name
TWC-Privacy
TWC-Locale-Group
X-PCL
X-OCL
X-Access
X-Adobe-Loc
X-Adobe-Content
X-Sql-Duration-Ms
X-ApacheServer
X-Server-W
X-AIR-PT
X-TNCMS
X-WA-Info
X-Via-Fastly
X-FW-Version
X-Request-Time
X-Sql-Count
X-Loop
X-Hosted-By
X-LAGOON
X-S-Maxage
X-No-Session
X-PERF
X-MP-GENERATED-AT
X-VWS-Id
X-R9-Blue-Green-Version
X-Via-CDN
X-LJ-Flow-ID
X-AWS-Id
X-ShopId
X-Cluster
X-Sorting-Hat-PodId
X-Shopify-Stage
X-Qloud-Router
X-ShardId
X-Alternate-Cache-Key
Mn-Server-Ip
X-Sorting-Hat-ShopId
X-Storefront-Renderer-Rendered
X-Status
X-Country-Code-Real
X-Webkit-Csp
X-FTR-Backend
X-Routing-Service
X-CCM
X-Proxied
S-Cnection
X-Cache-TTL-Remaining
X-FTR-DC
X-FTR-Cache-Status
X-FTR-Balancer
X-FTR-Backend-Server
X-FTR-Realm
X-Zipkin-Id
Cache-Hits
X-Is-Bot
X-Xfnlog-Site
X-Rendered-As
X-Tec-Api-Origin
X-Tec-Api-Root
X-Tec-Api-Version
X-FTR-Expires
X-Nginx-Cache
X-Dc
AMP-Access-Control-Allow-Source-Origin
X-Device-Type
X-Oracle-Dms-Rid
X-Ratelimit-Remaining
X-Detected-As
X-Info
X-Cache-Var
X-Cdn
Apigw-Requestid
X-Cache-Var-Map
X-Debug-IsPreview
X-SRV
X-Air-Hostname
X-Debug-IsConnected
X-Cache-Host
X-EdgeConnect-Cache-Status
X-Amzn-RequestId
X-Amzn-Remapped-Content-Length
X-Amz-Apigw-Id
X-Microcachable
X-Unique-Id
X-Cache-Enabled
X-Varnish-Grace
X-Content-Age
X-Dynatrace
X-Varnish-Server
X-Platform
SD-X-WS
Tracecode
X-DynaTrace-JS-Agent
X-GG-Cache-Date
X-Time-Microsecs
X-Azure-Ref
X-Backend-TTL
Uber-Trace-Id
X-Backend-Host
X-Cache-Backend
X-GEO
Amp-Access-Control-Allow-Source-Origin
X-ServerID
X-Erf-Stays-Bingo-Pdp-Web
X-APP-VERSION
X-CSRF-Token
X-Proxy-Cache-Status
X-Oss-Request-Id
X-Oss-Hash-Crc64ecma
X-Oss-Server-Time
X-Oss-Storage-Class
X-Oss-Object-Type
Akamai-GRN
X-Tb
DSUID
X-Correlation-ID
X-ATG-Version
X-BCube-Filmed-By
X-NewRelic-App-Data
X-Trace-Id
Backend
PB-RID
X-Sucuri-ID
X-NWS-UUID-VERIFY
X-Akamai-Transformed
PB-PID
Arc-Version
ServedBy
Machine
MD5-Digest
X-Magnolia-Registration
Odigeo-Trace-Id
X-VG-WebCache
X-VG-WebServer
Lfy
X-Device-Os
Meta-Geo-Continent
X-Destination
X-Origin-TTL
X-Vdms-Version
X-D
X-Vdms-Path
X-Origin-CC
Mobile-Detection-Method
Pramga
Fastcgi-X-Cache-Version
X-From
X-Level-Front-Cache
X-Fetched-On
X-Cache-PHP
X-Generated-On
X-Varnish-Hostname
X-GeoIP-City
X-Generation-Time
BehaviorPad-Version
X-RCS-CacheZone
X-Cache-NGX
X-External-Request-Id
Xc-Version
X-Matched-Rule
Instruction
X-Vtex-Remote-Cache
X-Varnish-Cache-Hits
X-Location
DCR-Decision-By
DCR-Processing-Time-Ms
Expiry
X-Vtex-Processado-Em
Path
X-CF-Lambda-Version
X-Application
X-SRCache-Key
X-ARC
Release
X-A-Wwc
X-Processor
X-A-Dcw
X-A-Dgt
X-CF-Lambda-Fn
X-B-Cookie
X-Rojux
X-Rewrite-Enabled
X-Request-UUID
X-S
X-S-Cookie
X-Session-Fingerprint
X-ScT
X-Cache-NE
X-A-Dam
X-Aed
Thinkindot-Control
X-PAYTM-SRV-ID
X-Trv-Group
Thinkindot-CacheControl-Type
X-Thinkindot-L3
T-Server
SR-User-Adfree
Thinkindot-CacheControl
X-Connection-Hash
X-PBS-Appsvrname
X-A-Ccd
X-A
Rendered-Blocks
X-Origin-Response-Time
X-Geo-Header
X-GeoIP
X-Bip
X-Generated-In
Pagetype
X-Cache-Date
X-Cache-Info
AKAMAI
CacheControlHeader
C-Via
Cache-Host
X-Csrf-Jwt
X-Backend-State
Gh-Request-Id
Fastly-Backend-Name
Ha-Gx-Prefs
HA-Ipaddr
L5d-Success-Class
Host-ID
UCS
X-CGP
Cf-Device-Type
X-FC-Vary-Parameters
X-Cdn-Origin
X-Azure-Ref-OriginShield
X-Eu-Site
Ssr
X-Has-Esi
X-TrackingId
X-Skip-Cache
X-Sn-Servicetimems
X-Reqid
X-Ms-Request-Id
X-Swa-Ws
X-Ms-Version
X-Micro-Cache
X-OVcl
X-Thanos
X-Node-Id
X-SVT-ORM-VERSION
X-VServer
X-SVT-ORM-RULES
X-Mvc-Supplant-Cachable
X-Cache-Bucket
X-Debug-Cache
X-B3-Traceid
X-Is-Gdpr
X-JWT-State
X-HS-Content-Campaign-Id
X-User
X-Tumblr-Pixel-3
X-Owner
X-Irp-Debug
X-OVcl-Cache
X-TA-CDN-Provider
X-Adobe-Source
On-Server
X-Cms-Context
X-Policy
X-Developer
X-VarnishDD-TTL
V-Age
X-Clientip
NGX
Wxu-Next-Commit
X-Origin-Expires
X-Core-Value
Server-Ext
Wxu-Next-Hostname
X-Varnish-Hits
Wxu-Next-Region
X-CUA
HostName
Server-Host
X-Var-Ttl
PFcat
Sever-Int
Server-Hostname
X-Developers
X-Fastly-Backend
X-Fastly-Cache
CloudFront-Viewer-Country
Content-Disposition
DB-Nickname
X-Cache-Tags
X-Scheme
X-Request-URI
X-HN
X-IP
X-Generated-By
X-Wikidot-Static-Cache
X-Request-Host
X-Wikidot-Backend
Location
X-Nginx-Cache-Key
Locid
Magicmarker
L
X-Envoy-Decorator-Operation
X-TX-ID
X-ID
User-Cache-Control
X-Ratelimit-Reset
X-Cache-Expires
X-SIPLIST1
X-Cache-Id
X-Request-Start
X-Rebelmouse-Cache-Control
X-Clara-WADP
X-Rebelmouse-Surrogate-Control
X-NAPM-TraceId
X-Slack-Backend
X-DefHash
X-LI-UUID
X-Li-Pop
X-Loc
X-Varnish-Beresp-Grace
X-Method
X-Li-Fabric
X-Fmm-Version
X-Gzip
X-Goog-Meta-Goog-Reserved-File-Mtime
X-Hash
X-Hnp-Log
X-Gen-Mode
X-Esi-Check
X-DPWN-IS-SECURE
X-Varnish-Remaining-TTL
X-DefElseHash
X-Varnish-CookieINHashed-On
X-Varnish-CookieHashed-On
X-Variation
X-GoCache-CacheStatus
X-VG-TLSProxy
X-WADP-Cache
X-Dispatcher-Server
X-NU-AKA-ACS-Version
X-Old-Content-Length
X-Origin
X-Platform-Server
X-Block-Status
IsBot
Is-Eu
X-Cache-Remote
NM-Fastcgi-Cache
Platform
True-Client-Country-4JS
Rt-Fastcgi-Cache
Fastly-SWR
Fastly-SIE
Apple-News-Services-Host
Apple-News-Services-Handled
Adler-Geo
Apple-News-Services-Parsed-Url
Apple-News-Services-Request-Url
Cf-Bgj
CDCHOST
Vix-Hermes-Req-Id
Origin
X-Branch-Name
Web-Mar-Node
X-App-Version
X-Cdn-Forward
X-B3-SpanId
CDN-RequestCountryCode
X-Core-Mission
CDN-PullZone
X-NC
X-Varnish-Beresp-Ttl
X-Servername
CDN-RequestId
CDN-CachedAt
X-Gamma-Serve
CDN-EdgeStorageId
CDN-Cache
X-Cache-Debug
Fastly-Drupal-HTML
X-Varnish-Beresp-Status
CDN-Uid
X-CS
X-Varnish-Url
X-Mvc-Supplant-OutputCached
X-EC-Lua
X-PF-Uncompressing
Url
X-NCache
Sid
X-LB-ID
S-Rt
X-Refresh
X-CACHE-GROUP
X-Response-By
X-Aicache-OS
X-Varnish-Cacheable
X-Host-Name
X-B3-Spanid
Xkeyi7
X-Proxy-Cachei7
Pics-Label
X-FireWall-Protection
Esi-Enabled
X-BBXSRF
N-Cache
CACHE
X-Via-Popn
X-Via-Popv
X-Via-Poph
Cross-Origin-Window-Policy
X-Epic-Correlation-Id
Content-Secure-Policy
Ohc-File-Size
X-Cache-2
X-Unique-ID
X-Tb-Optimization-Total-Bytes-Saved
X-Sucuri-Cache
X-Cc-Via
X-Cache-ASPX
X-Nc
X-RateLimit-Limit
X-Cc-Req-Id
X-Contensis-Viewer-Groups
X-Varnish-Authentication
D-Cc-Upstream
X-Error
Who
Cteonnt-Length
X-Srv
X-CDN-Forward
X-CACHE-KEY
X-Svr
Country-Code
Source
Req-Svc-Chain
MIME-Version
X-TraceId
X-Webkit-CSP-Report-Only
Geo-Info
X-Cs
X-Server-IP
X-Planisys-CDN-TTL
X-Planisys-CDN-Rules
Geoip-Latitude
X-Planisys-CDN-Cache
GeoIp-Country-Code
X-Servedbyhost
X-DC
X-Wa
HitType
Server-Ttl
X-Cache-Config
X-Origin-Time
X-Nyt-Route
X-Gdpr
X-API-Version
X-FPC
X-HS-Status
X-URL
Kp-EeAlive
Svr
Cmsid
X-SN
Cmstype
X-VC
X-LiteSpeed-Cache-Control
Hostname
Ohc-Cache-HIT
X-NodeID
X-NGINX-Cache
X-Webstats-RespID
X-Served-From
Viewtype
X-LI-Proto
VivaBuild
X-Esi
Server-ID
X-SB
X-VCL-Version
X-TIME
XServer
Cache-Key
X-Vcl-Version
X-Check-Cacheable
X-SD-PageType
A
X-HOST
NtCoent-Length
X-Viewer-Country
M-TraceId
Resin-Trace
SID
Tcn
X-Li-Proto
X-Vgn-Hpd-Reason
X-Render-Time
Request-ID
X-UA
X-Ua
Arc-Country
X-DB
Cross-Origin-Opener-Policy
X-Air-Source
TDXMobile
Cache-Provider
X-RSL
EpKe-Alive
X-RAMCache
Server-Id
X-DW
X-DI
X-CCDN-Origin-Time
X-TIM-N
X-Hcs-Proxy-Type
X-CCDN-CacheTTL
X-DSS
X-RPM
X-RPS
X-BBC-Edge-Cache-Status
Filterid
GeoIP-Country-Code
X-Auto-Login
X-Fastly-Request-Id
X-Internal-Host
X-CF-Powered-By
GeoIP-Latitude
X-Worker
X-Newrelic-Synthetics
X-ServedByHost
X-Action
X-Ftr-Cache-Host
Srv
X-WA
ProcessTime
X-App
X-Vc
Processtime
X-Geo
X-FTR-Cache-Host
X-CSRF-TOKEN
Upgrade-Insecure-Requests
X-Service
CDN
X-Cluster-Node
X-Oss-Cdn-Auth
Mime-Version
X-Fpc
NGB
X-CLOUD-TRACE-CONTEXT
X-Dynatrace-Js-Agent
X-BBC-Origin-Response-Status
Datacenter
Proxy-Connection
X-FORWARDED-FOR
X-HITS
X-HostName
CF-Cached-On
X-BACKEND-TTL
X-MSEdge-Features
X-Via-NSCOPI
FSS-Cache
Cdn
X-MSEdge-Flight
DataCenter
X-Fastly-Backend-Reqs
X-SaId
X-Akamai-Pragma-Client-IP
X-PHP-Backend
X-Parent-Response-Time
X-Dw-Trace-Id
X-JoinUs
X-NGENIX-Cache
X-Forwarded-Site
X-Cdn-Request-ID
X-CACHE-AGE
X-Extlb
X-Edge-Location
X-Client-Ip
Dnion-Transfer-Encoding
X-IN-APIGATEWAYSSL
X-ABtesting
X-Cache-Tag
X-Flog
X-Hello
X-Via-PopH
X-IN-APIGATEWAY
X-Via-PopV
X-Via-PopN
X-ND-Cache
W
OT-Force-Account-Verify
PICS-Label
X-Swift-Error
WZWS-RAY
X-Provided-By
X-Req
X-PJAX-URL
X-Pf-Uncompressing
LB
X-UnsetCookies
X-Proxy-Upstream
Mail-Subject
Surrogated-Key
X-Region-Sid
X-RateLimit-Limit-Second
Memcached
X-Presslabs-Stats
X-Depends-On
X-Lb-Id
X-Bc-Bl
X-Accel-Expires-Debug
Media-Length
X-Date
X-VC-Cache
X-Oracle-DMS-ECID
We-Hiring
X-RateLimit-Remaining-Second
Vha6-Origin
Memory
Epwk-X-Cache
X-MiniProfiler-Ids
Time
X-ZONE
X-APP
Env
X-Pad
X-Rocket-Build-Number
X-Sigma
X-LiteSpeed-Tag
X-Sigma-Backend
Cf-Ipcountry
X-Zone
X-Men
X-Amz-Meta-Cb-Modifiedtime
X-Air-Trace-Id
X-Varnish-URL
X-ServerName
X-Acquia-Application-UUID
X-Acquia-Application-Trace
X-Acquia-Purge-Tags
X-Acquia-Site
X-Request-URL
X-Request-Url
URI
X-Akamai-ERRuleID
X-Vcache
X-Akamai-ERPolicy
X-Csrf-Token
X-Litespeed-Cache-Control
X-Varnish-Beresp-TTL
X-ElasticPress-Query
X-Ms-Meta-Originalurl
X-Snapshot-Date
X-B3-Parentspanid
Xet-Cookie
X-ElasticPress-Search
X-Ms-Meta-Staticbatchstarttime
CountryCode
X-Tid
VNS-Cache
VNS-Age
CPC-Age
CPC-Cache
Phost
X-Traceid
X-Storefront-Renderer-Verified
X-Debug-Cache-Fetch
X-Debug-Cache-Store
X-Akamai-Request-ID
Ohc-Response-Time
X-Redis-Count
Environment
Inserted-Into-Cache-At
X-C
X-Redis-Duration-Ms
NnCoection